macOS intune

Set a Deadline For Office Updates on macOS using MAU

The inclusion of options to configure Microsoft AutoUpdate (MAU) in the settings catalog of the latest service promises to simplify this process.

7 min read
Set a Deadline For Office Updates on macOS using MAU

Today, we're going to be addressing a peculiar issue that many Mac users have been experiencing. You might have heard from them directly or noticed a few comments and feedback left by users expressing their concerns about this.

The issue, which seems to crop up once or twice every week, involves M365 applications that are in use - primarily Outlook, Teams, Word, and Excel. Users describe an unusual sequence of events where all the open apps suddenly cease operation simultaneously, exiting and disappearing from the dock in a blink.

What adds a further twist to this situation is that these applications don't stay gone for long. Just as unexpectedly as they vanished, they make their reappearance on the dock, ready to be launched again.

Given its unpredictable nature and its inexplicable occurrence, it can be frustrating and disrupt the workflow of users. This blog post aims to explore this mystery further. By identifying the potential causes, I hope to provide solutions to overcome them, thereby enhancing the user experience of M365 on Mac systems.

So, stay tuned as we dive deep into this tech enigma, dissecting it bit by bit to bring clarity and solutions to you.


Understanding Microsoft AutoUpdate

Microsoft AutoUpdate (MAU) is a utility designed to help you manage updates for Microsoft applications on macOS. It ensures that your Word, Excel, PowerPoint, Outlook, and other Microsoft apps are always up-to-date with the latest security fixes and improvements. It can be set to automatically check for updates or be manually managed, giving you control over when and how your applications are updated.

By default, MAU will perform version checks against Microsoft’s Content Delivery Network (CDN) on the Internet to determine whether the locally installed app has an update available. If an update is available, MAU will determine the smallest package to download to bring the locally installed version of the app up-to-date.

There are two scenarios where enterprise IT admins might want better control over the update workflow:

  1. The ability for MAU to use a local network source for retrieving update packages instead of the Microsoft CDN on the Internet. This scenario is good for ‘branch’ scenarios, and cases where Internet bandwidth is limited. For this scenario, MAU can be configured to use a ‘UpdateCache’.
  2. An enterprise might want to have strict control over which version of Office applications can be installed. For example, Microsoft releases production quality updates on the second or third Tuesday of each month. An enterprise might want to temporarily prevent users from updating to the new build to verify compatibility with custom applications. For this scenario, MAU can be configured to use a custom ‘ManifestServer’.

Both of the scenarios above can be deployed independently, or together, depending on the requirements of the business. MAU 3.8 or later is required to support both of these scenarios.


Understanding How MAU Works

Before you start configuring policies for MAU, it is necessary to understand that it actually works.

The Microsoft AutoUpdate (MAU) checks for application updates every 12 hours by examining a version number that is embedded in an XML file, commonly referred to as a 'manifest,' which is located online. This version number is then contrasted with the version of the app that is presently installed on the local system. If the background process detects that the XML file points to a more recent version than the installed one, the full MAU application window pops open, prompting users to execute an update.

The process breakdown is as below:

  1. Checking for Updates: By default, MAU periodically checks for updates in the background. It communicates with Microsoft servers to see if there are any new patches, improvements, or features available for your installed Microsoft applications.
  2. Download and Installation: Depending on the settings you've chosen, MAU either notifies you about available updates or directly downloads and installs them. If you've opted for automatic updates, the process happens in the background, ensuring your Microsoft applications are always current.
  3. Update Notifications: If your settings allow for it, MAU will send you a notification whenever updates are available. You can then choose whether to download and install the updates immediately or delay them for a later time.
  4. Application Closure for Updates: Some updates may require the target application to close for successful installation. MAU will prompt you to close the application if it is running during the update process.
  5. System Restart: Certain significant updates might need a system restart to be fully integrated. MAU will notify you and request a system restart after the installation of such updates.

How to Access Microsoft AutoUpdate on macOS


Accessing Microsoft AutoUpdate on your macOS is straightforward. There are three simple ways to access MAU on your Mac:

Method 1: From a Microsoft Office App

Open any Microsoft application, such as Word or Excel. In the menu bar at the top of the screen, click on "Help," and then select "Check for Updates." This will open the Microsoft AutoUpdate tool.

Method 2: Running Microsoft AutoUpdate

If you're unable to locate the "Check for Updates" option within the Help menu of your Microsoft applications, fret not, you can still ensure that you have the latest version by downloading the Microsoft AutoUpdate tool. Follow this link: Download Microsoft AutoUpdate 4.61 Package to download the AutoUpdate installer file. By simply clicking the link, the download of the AutoUpdate tool should commence automatically.

Method 3: Using the App Store


Exploring Microsoft AutoUpdate Options


Configuring Microsoft AutoUpdate

You have multiple ways to Configure MAU

With the Service release 2307 of Microsoft Intune, Microsoft has added the MAU configuration in the settings catalog, so now no need to deploy custom profiles for managing MAU 😍👍👌

https://learn.microsoft.com/en-us/mem/intune/fundamentals/whats-new#new-settings-available-in-the-macos-settings-catalog-

Settings Catalog

Starting with version 4.13 of Microsoft AutoUpdate (MAU), you can set a deadline for when updates are required to be installed on a user’s Mac.

Users will receive notifications about the upcoming deadline and can temporarily postpone the updates from being installed. But once the deadline is reached, any applications the user has open will be closed and the updates applied.

To configure your Microsoft AutoUpdate settings, follow these steps:

  1. Sign in to the Microsoft Intune admin center.
  2. Select Devices > macOS >Configuration profiles > Create profile
  3. Select Settings catalog.
  4. Select Create.
  5. Select Next.
  6. In Configuration settings, select Add settings. In the settings picker, search for "MAU" to select all the available settings.

You can set a deadline for any of the following applications:

Once you have configured the settings, the profile may look like this:

Custom Configurations

Intune allows you to control the MAU configurations using a custom profile. Similar to the settings catalog, you can configure all the options using a custom configuration profile.

An example of the configuration profile is available on my GitHub:

macOS/mau_policy.mobileconfig at main · pathaksomesh06/macOS
macOS. Contribute to pathaksomesh06/macOS development by creating an account on GitHub.

Conclusion

Up until now, managing updates for Microsoft applications on managed Macs was somewhat intricate. It necessitated the creation of custom profiles and adjusting configurations to align with specific needs. In a world where zero-day vulnerabilities are frequently discovered, it's critically important to keep user devices updated with the latest security patches. However, the update behavior of Microsoft apps also had the potential to impact user experience.

The inclusion of options to configure Microsoft AutoUpdate (MAU) in the settings catalog of the latest service promises to simplify this process. This development paves the way for more effective management and deployment of updates on your end users' Macs, minimizing disruption to the user experience. By gaining a deeper understanding of these settings and tailoring them to your needs, you can effortlessly maintain up-to-date applications, whether you favor automatic updates or prefer a more manual approach.

Remember, the world of tech is always changing, so keep an eye out for any updates to AutoUpdate itself and stay ahead of the curve.

Share This Post

Check out these related posts

Early Bird Gets the Worm: Testing iOS 18 & macOS 15 (Beta) Devices with Intune

Platform SSO for macOS: A Deep Dive into Configuration & Troubleshooting

Application Inventory: The Unsung Hero of macOS Security